Cockpit prior to 0.12.0 NoSQL injection in /auth/resetpassword

The attackers may take advantage of flaws in the Cockpit source code to carry out a kind of attack, such as getting access to any user account and reset passwords. In some configurations, the vulnerabilities might allow an attacker to execute code on a Cockpit server. The first flaw allows a NoSQL injection attack through the Controller/Auth.php search feature, and the second flaw allows for a NoSQL injection attack through the Controller/Auth.php reset password function.

Mitigation / Precaution

We suggest you to update Cockpit to a version greater than 0.12.0 in order to fix this vulnerability.

Written by

Prathap

Co-founder, Director

Prathap has around 20 years of experience and has worked on various projects in leading companies like Hitachi, Toshiba, Schneider Electric, ABB, Panasonic, and MicroFuzzy. His expertise lies in architecting, designing, and developing secure projects covering various aspects of software development, processes, and methodology.